OpenWRT Router changes public IP to it's private IP
We've got an openwrt router at a site, it's private IP is 10.0.0.1. Whenever we get an inbound call on the external profile (and probably outbound calls to, haven't checked yet), it changes the contact IP to the router's private IP, so that every call we get looks like it's coming from thr router. We've had some intermittent audio problems recently and we're trying to narrow things down a bit. Is this the expected behavior for NAT? Sorry might seem like a dumb question, but my job entails much more than keeping the company's server's happy and I'm starting to lose my grip and I'm definitely not experienced with NAT. All of my routers in the past have given FS the public IP of the contacting server. I have web servers behind the same NAT and doing the same thing, showing the private IP of the router instead of showing the public IP of the client. So I know it's not an issue with FS. Just wanted to see if anyone has exoerienced this before. Makes it difficult to use fail2ban on my servers, as it continually jails my router. Thank you, Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana Sent from a mobile device.
Use STUN. Ext-rtp-ip and ext-sip-ip addresses are a great way to start looking into this. You can define stun servers as stun:stunserver.here.tld From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian Foster Sent: Thursday, August 8, 2013 1:38 PM To: FreeSWITCH Users Help Subject: [Freeswitch-users] OpenWRT Router changes public IP to it's private IP We've got an openwrt router at a site, it's private IP is 10.0.0.1. Whenever we get an inbound call on the external profile (and probably outbound calls to, haven't checked yet), it changes the contact IP to the router's private IP, so that every call we get looks like it's coming from thr router. We've had some intermittent audio problems recently and we're trying to narrow things down a bit. Is this the expected behavior for NAT? Sorry might seem like a dumb question, but my job entails much more than keeping the company's server's happy and I'm starting to lose my grip and I'm definitely not experienced with NAT. All of my routers in the past have given FS the public IP of the contacting server. I have web servers behind the same NAT and doing the same thing, showing the private IP of the router instead of showing the public IP of the client. So I know it's not an issue with FS. Just wanted to see if anyone has exoerienced this before. Makes it difficult to use fail2ban on my servers, as it continually jails my router. Thank you, Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana Sent from a mobile device.
Stun is used on external profile, but I'll double check to see if they are correct. Thank you, Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana Sent from a mobile device. On Aug 8, 2013 5:08 PM, "Jeff Leung" <jleung@v10networks.ca> wrote:
Use STUN. Ext-rtp-ip and ext-sip-ip addresses are a great way to start looking into this.****
** **
You can define stun servers as stun:stunserver.here.tld****
** **
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Brian Foster *Sent:* Thursday, August 8, 2013 1:38 PM *To:* FreeSWITCH Users Help *Subject:* [Freeswitch-users] OpenWRT Router changes public IP to it's private IP****
** **
We've got an openwrt router at a site, it's private IP is 10.0.0.1. Whenever we get an inbound call on the external profile (and probably outbound calls to, haven't checked yet), it changes the contact IP to the router's private IP, so that every call we get looks like it's coming from thr router. We've had some intermittent audio problems recently and we're trying to narrow things down a bit. Is this the expected behavior for NAT? ****
Sorry might seem like a dumb question, but my job entails much more than keeping the company's server's happy and I'm starting to lose my grip and I'm definitely not experienced with NAT.****
All of my routers in the past have given FS the public IP of the contacting server. I have web servers behind the same NAT and doing the same thing, showing the private IP of the router instead of showing the public IP of the client. So I know it's not an issue with FS. Just wanted to see if anyone has exoerienced this before. Makes it difficult to use fail2ban on my servers, as it continually jails my router.****
Thank you,****
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana****
Sent from a mobile device.****
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
You also may want to see if OpenWRT is doing something called symmetric NAT too. That can cause STUN's port detection technique to fail completely. From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian Foster Sent: Thursday, August 8, 2013 2:49 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] OpenWRT Router changes public IP to it's private IP Stun is used on external profile, but I'll double check to see if they are correct. Thank you, Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana Sent from a mobile device. On Aug 8, 2013 5:08 PM, "Jeff Leung" <jleung@v10networks.ca> wrote: Use STUN. Ext-rtp-ip and ext-sip-ip addresses are a great way to start looking into this. You can define stun servers as stun:stunserver.here.tld From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian Foster Sent: Thursday, August 8, 2013 1:38 PM To: FreeSWITCH Users Help Subject: [Freeswitch-users] OpenWRT Router changes public IP to it's private IP We've got an openwrt router at a site, it's private IP is 10.0.0.1. Whenever we get an inbound call on the external profile (and probably outbound calls to, haven't checked yet), it changes the contact IP to the router's private IP, so that every call we get looks like it's coming from thr router. We've had some intermittent audio problems recently and we're trying to narrow things down a bit. Is this the expected behavior for NAT? Sorry might seem like a dumb question, but my job entails much more than keeping the company's server's happy and I'm starting to lose my grip and I'm definitely not experienced with NAT. All of my routers in the past have given FS the public IP of the contacting server. I have web servers behind the same NAT and doing the same thing, showing the private IP of the router instead of showing the public IP of the client. So I know it's not an issue with FS. Just wanted to see if anyone has exoerienced this before. Makes it difficult to use fail2ban on my servers, as it continually jails my router. Thank you, Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 <tel:317-787-2686%20x2102> M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana Sent from a mobile device. _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Like DNAT vs SNAT? Forwarding rules are set to DNAT in luci if that is what you are referring to. Thank you, Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana Sent from a mobile device. On Aug 8, 2013 6:00 PM, "Jeff Leung" <jleung@v10networks.ca> wrote:
You also may want to see if OpenWRT is doing something called symmetric NAT too. That can cause STUN’s port detection technique to fail completely. ****
** **
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Brian Foster *Sent:* Thursday, August 8, 2013 2:49 PM *To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] OpenWRT Router changes public IP to it's private IP****
** **
Stun is used on external profile, but I'll double check to see if they are correct.****
Thank you,****
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana****
Sent from a mobile device.****
On Aug 8, 2013 5:08 PM, "Jeff Leung" <jleung@v10networks.ca> wrote:****
Use STUN. Ext-rtp-ip and ext-sip-ip addresses are a great way to start looking into this.****
****
You can define stun servers as stun:stunserver.here.tld****
****
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Brian Foster *Sent:* Thursday, August 8, 2013 1:38 PM *To:* FreeSWITCH Users Help *Subject:* [Freeswitch-users] OpenWRT Router changes public IP to it's private IP****
****
We've got an openwrt router at a site, it's private IP is 10.0.0.1. Whenever we get an inbound call on the external profile (and probably outbound calls to, haven't checked yet), it changes the contact IP to the router's private IP, so that every call we get looks like it's coming from thr router. We've had some intermittent audio problems recently and we're trying to narrow things down a bit. Is this the expected behavior for NAT? ****
Sorry might seem like a dumb question, but my job entails much more than keeping the company's server's happy and I'm starting to lose my grip and I'm definitely not experienced with NAT.****
All of my routers in the past have given FS the public IP of the contacting server. I have web servers behind the same NAT and doing the same thing, showing the private IP of the router instead of showing the public IP of the client. So I know it's not an issue with FS. Just wanted to see if anyone has exoerienced this before. Makes it difficult to use fail2ban on my servers, as it continually jails my router.****
Thank you,****
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana****
Sent from a mobile device.****
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org****
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi Brian, Typically what happens is your external source sends the packet to your external IP (which is the WAN ip of the openWRT router), the router receives it, and if there are NAT rules defined, it will rewrite the source (in the DNAT case) to the internal IP of your FS (or webserver, etc), you can have it do it based on port it comes in on, ip it comes from, etc. It also should do the same on the way out of your network so that the 2 devices can have a bi-directional communication. If your SIP packets on FS are coming with the source as 10.0.0.1 (your router's internal interface) it sounds to me like your NAT isn't configured right. Double check all of your NAT re-write rules. I did this over an openVPN setup (haven't done it from WAN -> LAN on openWRT, but in the openWRT example I remember it being quite simple, you didn't have to write all the rules manually, you just had to enable masquerading on the proper zones and it took care of NAT. I think you would have to write it manually in your case because it sounds like you're looking to route different traffic coming in to the same IP to different internal systems depending on what port they come in on. Try something along the lines of: https://forum.openwrt.org/viewtopic.php?id=35106 Not sure if I'm helping or confusing you more :) Paul On Thu, 8 Aug, 2013 at 3:11 PM, Brian Foster <bdfoster@davri.com> wrote:
Like DNAT vs SNAT? Forwarding rules are set to DNAT in luci if that is what you are referring to.
Thank you,
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana
Sent from a mobile device.
On Aug 8, 2013 6:00 PM, "Jeff Leung" <jleung@v10networks.ca> wrote:
You also may want to see if OpenWRT is doing something called symmetric NAT too. That can cause STUN’s port detection technique to fail completely.
From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian Foster Sent: Thursday, August 8, 2013 2:49 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] OpenWRT Router changes public IP to it's private IP
Stun is used on external profile, but I'll double check to see if they are correct.
Thank you,
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana
Sent from a mobile device.
On Aug 8, 2013 5:08 PM, "Jeff Leung" <jleung@v10networks.ca> wrote:
Use STUN. Ext-rtp-ip and ext-sip-ip addresses are a great way to start looking into this.
You can define stun servers as stun:stunserver.here.tld
From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian Foster Sent: Thursday, August 8, 2013 1:38 PM To: FreeSWITCH Users Help Subject: [Freeswitch-users] OpenWRT Router changes public IP to it's private IP
We've got an openwrt router at a site, it's private IP is 10.0.0.1. Whenever we get an inbound call on the external profile (and probably outbound calls to, haven't checked yet), it changes the contact IP to the router's private IP, so that every call we get looks like it's coming from thr router. We've had some intermittent audio problems recently and we're trying to narrow things down a bit. Is this the expected behavior for NAT?
Sorry might seem like a dumb question, but my job entails much more than keeping the company's server's happy and I'm starting to lose my grip and I'm definitely not experienced with NAT.
All of my routers in the past have given FS the public IP of the contacting server. I have web servers behind the same NAT and doing the same thing, showing the private IP of the router instead of showing the public IP of the client. So I know it's not an issue with FS. Just wanted to see if anyone has exoerienced this before. Makes it difficult to use fail2ban on my servers, as it continually jails my router.
Thank you,
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana
Sent from a mobile device.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Paul, thanks for the reply. I'll definitely check this out on Monday. Thank you, Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana Sent from a mobile device. On Aug 9, 2013 9:03 PM, "Paul" <pasha@prosperity4ever.com> wrote:
Hi Brian,
Typically what happens is your external source sends the packet to your external IP (which is the WAN ip of the openWRT router), the router receives it, and if there are NAT rules defined, it will rewrite the source (in the DNAT case) to the internal IP of your FS (or webserver, etc), you can have it do it based on port it comes in on, ip it comes from, etc. It also should do the same on the way out of your network so that the 2 devices can have a bi-directional communication.
If your SIP packets on FS are coming with the source as 10.0.0.1 (your router's internal interface) it sounds to me like your NAT isn't configured right. Double check all of your NAT re-write rules.
I did this over an openVPN setup (haven't done it from WAN -> LAN on openWRT, but in the openWRT example I remember it being quite simple, you didn't have to write all the rules manually, you just had to enable masquerading on the proper zones and it took care of NAT.
I think you would have to write it manually in your case because it sounds like you're looking to route different traffic coming in to the same IP to different internal systems depending on what port they come in on.
Try something along the lines of: https://forum.openwrt.org/viewtopic.php?id=35106
Not sure if I'm helping or confusing you more :)
Paul
On Thu, 8 Aug, 2013 at 3:11 PM, Brian Foster <bdfoster@davri.com> wrote:
Like DNAT vs SNAT? Forwarding rules are set to DNAT in luci if that is what you are referring to.
Thank you,
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana
Sent from a mobile device. On Aug 8, 2013 6:00 PM, "Jeff Leung" <jleung@v10networks.ca> wrote:
You also may want to see if OpenWRT is doing something called symmetric NAT too. That can cause STUN’s port detection technique to fail completely. ****
** **
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Brian Foster *Sent:* Thursday, August 8, 2013 2:49 PM *To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] OpenWRT Router changes public IP to it's private IP****
** **
Stun is used on external profile, but I'll double check to see if they are correct.****
Thank you,****
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana****
Sent from a mobile device.****
On Aug 8, 2013 5:08 PM, "Jeff Leung" <jleung@v10networks.ca> wrote:****
Use STUN. Ext-rtp-ip and ext-sip-ip addresses are a great way to start looking into this.****
****
You can define stun servers as stun:stunserver.here.tld****
****
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Brian Foster *Sent:* Thursday, August 8, 2013 1:38 PM *To:* FreeSWITCH Users Help *Subject:* [Freeswitch-users] OpenWRT Router changes public IP to it's private IP****
****
We've got an openwrt router at a site, it's private IP is 10.0.0.1. Whenever we get an inbound call on the external profile (and probably outbound calls to, haven't checked yet), it changes the contact IP to the router's private IP, so that every call we get looks like it's coming from thr router. We've had some intermittent audio problems recently and we're trying to narrow things down a bit. Is this the expected behavior for NAT? ****
Sorry might seem like a dumb question, but my job entails much more than keeping the company's server's happy and I'm starting to lose my grip and I'm definitely not experienced with NAT.****
All of my routers in the past have given FS the public IP of the contacting server. I have web servers behind the same NAT and doing the same thing, showing the private IP of the router instead of showing the public IP of the client. So I know it's not an issue with FS. Just wanted to see if anyone has exoerienced this before. Makes it difficult to use fail2ban on my servers, as it continually jails my router.****
Thank you,****
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana****
Sent from a mobile device.****
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org****
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hey, Are you running the SIP nat module on openers? There are 2 SIP modules and One of the 2 is responsible for changing SIP packets. You can disable it. The other One is responsible for opening ports. I don't use both as I fond it top risky after some tests. However, it may depend on your environment. Michel Op 8 aug. 2013 22:42 schreef "Brian Foster" <bdfoster@davri.com> het volgende:
We've got an openwrt router at a site, it's private IP is 10.0.0.1. Whenever we get an inbound call on the external profile (and probably outbound calls to, haven't checked yet), it changes the contact IP to the router's private IP, so that every call we get looks like it's coming from thr router. We've had some intermittent audio problems recently and we're trying to narrow things down a bit. Is this the expected behavior for NAT?
Sorry might seem like a dumb question, but my job entails much more than keeping the company's server's happy and I'm starting to lose my grip and I'm definitely not experienced with NAT.
All of my routers in the past have given FS the public IP of the contacting server. I have web servers behind the same NAT and doing the same thing, showing the private IP of the router instead of showing the public IP of the client. So I know it's not an issue with FS. Just wanted to see if anyone has exoerienced this before. Makes it difficult to use fail2ban on my servers, as it continually jails my router.
Thank you,
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana
Sent from a mobile device.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I doubt either one are used, atleast I haven't installed it. It's running Backfire and the router itself is a Netgear WNDR3700. Unless it's installed by default... Thank you, Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana Sent from a mobile device. On Aug 8, 2013 5:08 PM, "Michel Brabants" <michel.brabants@gmail.com> wrote:
Hey, Are you running the SIP nat module on openers? There are 2 SIP modules and One of the 2 is responsible for changing SIP packets. You can disable it. The other One is responsible for opening ports. I don't use both as I fond it top risky after some tests. However, it may depend on your environment.
Michel Op 8 aug. 2013 22:42 schreef "Brian Foster" <bdfoster@davri.com> het volgende:
We've got an openwrt router at a site, it's private IP is 10.0.0.1. Whenever we get an inbound call on the external profile (and probably outbound calls to, haven't checked yet), it changes the contact IP to the router's private IP, so that every call we get looks like it's coming from thr router. We've had some intermittent audio problems recently and we're trying to narrow things down a bit. Is this the expected behavior for NAT?
Sorry might seem like a dumb question, but my job entails much more than keeping the company's server's happy and I'm starting to lose my grip and I'm definitely not experienced with NAT.
All of my routers in the past have given FS the public IP of the contacting server. I have web servers behind the same NAT and doing the same thing, showing the private IP of the router instead of showing the public IP of the client. So I know it's not an issue with FS. Just wanted to see if anyone has exoerienced this before. Makes it difficult to use fail2ban on my servers, as it continually jails my router.
Thank you,
Brian Foster Project Manager/Owner's Rep. Davri Investments, Inc. O: 317-787-2686 x2102 M: 317-600-9753 E: bdfoster@davri.com Indianapolis, Indiana
Sent from a mobile device.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (4)
-
Brian Foster
-
Jeff Leung
-
Michel Brabants
-
Paul